HPE7-A02試験無料問題集（130題）「HP Aruba Certified Network Security Professional 認定」

出題：1

Your company wants to implement Tunneled EAP (TEAP).
How can you set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to enforce certificated-based authentication for clients using TEAP?

A. For the service using TEAP, set the authentication source to an internal database.

B. Select an EAP-TLS-type authentication method for the TEAP method's inner method.

C. Select a service certificate when you specify TEAP as a service's authentication method.

D. Create an authentication method named "TEAP" with the type set to EAP-TLS.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.).
For which type of certificate is it recommended to install a CA-signed certificate on the Subscriber before it joins the cluster?

A. RadSec

B. RADIUS/EAP

C. Database

D. HTTPS

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You are helping an organization deploy HPE Aruba Networking SSE. What is one reason to recommend that the company install agents on remote users' devices?

A. To run posture checks and apply different permissions based on those checks.

B. To run threat inspection on clients in a local sandbox rather than in the cloud.

C. To permit users to access private servers using SSH.

D. To permit admins to manage the HPE Aruba Networking SSE policy rules.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A company is implementing a client-to-site VPN based on tunnel-mode IPsec.
Which devices are responsible for the IPsec encapsulation?

A. Gateways at the remote clients' locations and devices accessed by the clients at the main site

B. Gateways at the remote clients' locations and a gateway at the main site

C. The remote clients and devices accessed by the clients at the main site

D. The remote clients and a gateway at the main site

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A company wants you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI).
What is one aspect of the integration that you should explain?

A. CPPM no longer supports any Device Profiler features and relies on CPDI for this profile information.

B. CPDI must have security analysis disabled on it for the integration to be successful.

C. CPPM can submit profile information to CPDI, but if CPDI derives a different classification, CPDI takes precedence.

D. CPDI must be configured as an audit server on CPPM for the integration to be successful.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You need to use "Tips:Posture" conditions within an 802.1X service's enforcement policy.
Which guideline should you follow?

A. Enable profiling in the service's general settings.

B. Enable caching roles and posture attributes from previous sessions in the service's enforcement settings.

C. Select the Posture Policy type for the service's enforcement policy.

D. Create rules that assign postures in the service's role mapping policy.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

A company needs to enforce 802.1X authentication for its Windows domain computers to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company needs the computers to authenticate as both machines and users in the same session.
Which authentication method should you set up on CPPM?

A. EAP-TTLS

B. PEAP MSCHAPv2

C. EAP-TLS

D. TEAP

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

A company is implementing HPE Aruba Networking Wireless IDS/IPS (WIDS/WIPS) on its AOS-10 APs, which are managed in HPE Aruba Networking Central.
What is one requirement for enabling detection of rogue APs?

A. One AM deployed for every one AP deployed

B. Each VLAN in the network assigned on at least one AP's or AM's port

C. A manual radio profile that enables non-regulatory channels

D. A Foundation with Security license for each of the APs

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Refer to the Exhibit:

These packets have been captured from VLAN 10. which supports clients that receive their IP addresses with DHCP.
What can you interpret from the packets that you see here?
These packets have been captured from VLAN 10, which supports clients that receive their IP addresses with DHCP. What can you interpret from the packets that you see here?

A. Someone is possibly implementing a MAC spoofing attack to gain unauthorized access.

B. Someone is possibly implementing an ARP poisoning and MITM attack.

C. An admin has likely misconfigured two clients to use the same DHCP settings.

D. The mirroring session that captured the packets was likely misconfigured and captured duplicate traffic.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

A company has HPE Aruba Networking APs running AOS-10 that connect to AOS-CX switches. The APs will:
. Authenticate as 802.1X supplicants to HPE Aruba Networking ClearPass Policy Manager (CPPM)
. Be assigned to the "APs" role on the switches
. Have their traffic forwarded locally
What information do you need to help you determine the VLAN settings for the "APs" role?

A. Whether the APs bridge or tunnel traffic on their SSIDs

B. Whether the switches have established tunnels with an HPE Aruba Networking gateway

C. Whether the switches are using local user-roles (LURs) or downloadable user-roles (DURs)

D. Whether the APs have static or DHCP-assigned IP addresses

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

HPE7-A02試験無料問題集「HP Aruba Certified Network Security Professional 認定」